
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: ROP8ZFDvEG/cVqnEj8S8ryqsWVtNa3MuOB/Hwe925rg=
Subject key identifier: 12:75:AA:D8:85:A5:38:05:42:BB:C5:02:6E:CB:99:8D:E5:A9:E6:51
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 01D6
Signing time: Sat 13 Jun 2026 03:37:40 +0000
Manifest this update: Sat 13 Jun 2026 03:37:39 +0000
Manifest next update: Sat 20 Jun 2026 03:37:39 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: xjqWvRo+9A71O82KL7OmHhyMuMKAhTUG4G/KdpNRD7w=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Jun 13 03:37:39 2026 GMT
Not After : Jun 20 03:37:39 2026 GMT
Subject: CN=6a2cd084-5e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:e9:bd:16:6d:cf:49:52:ec:00:bb:a1:5b:
66:39:99:15:9d:01:76:7f:f4:18:14:47:5e:aa:31:
d4:75:47:86:9e:ca:a9:c8:42:25:fd:07:1e:49:14:
51:11:f6:2b:db:56:6b:02:a9:64:e2:df:4e:7b:e3:
70:e6:01:0f:c9:cf:5e:f8:7e:83:e0:db:44:f3:96:
63:41:86:a9:4d:72:fe:d5:43:aa:36:45:3d:4e:5f:
86:60:58:48:a3:c1:e5:ef:c9:db:ad:06:de:d1:19:
25:8a:3b:a6:5b:db:99:ef:a0:95:a7:4c:36:8e:1f:
58:3a:21:d3:29:83:62:33:ec:23:c7:60:90:4c:78:
29:5f:52:65:40:a8:f9:09:e0:18:e1:4e:f3:f8:66:
00:eb:d6:8d:0d:43:aa:6d:65:c7:4d:f1:7f:a8:bc:
da:82:dd:a8:d6:d3:53:b4:de:11:df:b8:b8:b6:c6:
f2:73:2a:03:d8:28:7d:e3:95:e3:5a:c3:77:e6:e0:
ab:f0:f6:60:07:1a:5d:e3:0c:29:b3:76:6f:32:14:
c5:03:50:f0:ac:81:8f:9b:a5:89:0a:cd:a0:12:83:
12:3f:bd:2d:72:47:58:92:6e:76:aa:30:07:60:37:
6f:f8:fb:77:50:55:fb:a6:84:6a:20:0c:be:2d:63:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:AA:D8:85:A5:38:05:42:BB:C5:02:6E:CB:99:8D:E5:A9:E6:51
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:86:7c:52:fd:bc:11:67:08:e4:f4:7c:84:21:c9:83:10:3b:
be:f6:1c:13:ce:63:6f:48:82:1a:10:2e:c8:df:15:30:80:75:
83:22:b9:9e:f5:df:5e:89:9a:8a:ef:a6:79:95:ba:2f:e2:96:
49:51:f0:67:8f:1d:52:c1:9f:68:18:f8:5e:eb:ae:a0:25:c9:
33:e2:12:7a:40:4b:c5:ce:59:09:61:36:b0:3c:40:46:80:20:
ff:8a:54:52:cc:59:b0:8d:e5:58:46:fc:e6:29:34:c0:af:25:
e8:ac:e9:89:c6:12:d8:4e:e5:38:d0:8c:4d:af:09:fa:49:e4:
b2:38:ad:d4:7a:95:54:77:48:0c:7f:88:62:c3:38:ca:65:d5:
65:6f:4a:5b:8c:fa:d3:ef:2a:e8:c5:89:1f:7b:9f:b3:e8:68:
0b:e7:84:24:57:e1:23:ce:6d:e4:26:c1:f7:f1:e4:64:d2:e2:
24:96:0f:59:5d:38:18:d2:2b:3f:57:12:39:9a:f8:0b:3e:06:
8c:0a:13:c8:5d:67:7f:83:bf:1a:f9:5f:84:c7:af:c4:21:35:
fd:47:20:a6:30:8f:07:e4:5c:8b:d5:83:79:1b:f4:48:4c:22:
96:c7:a9:1d:19:c4:68:95:77:39:47:db:ca:24:01:95:a4:67:
e0:dc:59:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4
OEExOTAwNjAwHhcNMjYwNjEzMDMzNzM5WhcNMjYwNjIwMDMzNzM5WjAYMRYwFAYD
VQQDEw02YTJjZDA4NC01ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/XpvRZtz0lS7AC7oVtmOZkVnQF2f/QYFEdeqjHUdUeGnsqpyEIl/QceSRRR
EfYr21ZrAqlk4t9Oe+Nw5gEPyc9e+H6D4NtE85ZjQYapTXL+1UOqNkU9Tl+GYFhI
o8Hl78nbrQbe0RklijumW9uZ76CVp0w2jh9YOiHTKYNiM+wjx2CQTHgpX1JlQKj5
CeAY4U7z+GYA69aNDUOqbWXHTfF/qLzagt2o1tNTtN4R37i4tsbycyoD2Ch945Xj
WsN35uCr8PZgBxpd4wwps3ZvMhTFA1DwrIGPm6WJCs2gEoMSP70tckdYkm52qjAH
YDdv+Pt3UFX7poRqIAy+LWMocwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJ1qtiF
pTgFQrvFAm7LmY3lqeZRMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3
RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE
NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjYZ8Uv28EWcI5PR8hCHJgxA7vvYcE85jb0iCGhAuyN8VMIB1gyK5nvXfXoma
iu+meZW6L+KWSVHwZ48dUsGfaBj4XuuuoCXJM+ISekBLxc5ZCWE2sDxARoAg/4pU
UsxZsI3lWEb85ik0wK8l6KzpicYS2E7lONCMTa8J+knksjit1HqVVHdIDH+IYsM4
ymXVZW9KW4z60+8q6MWJH3ufs+hoC+eEJFfhI85t5CbB9/HkZNLiJJYPWV04GNIr
P1cSOZr4Cz4GjAoTyF1nf4O/GvlfhMevxCE1/UcgpjCPB+Rci9WDeRv0SEwilsep
HRnEaJV3OUfbyiQBlaRn4NxZaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:14 2026 by rpki-client